diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2020-04-08 21:44:06 +0200 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2020-04-08 21:44:06 +0200 |
| commit | 9275a8704bb07bc86385e6f2797dad42b3b71478 (patch) | |
| tree | 76b3860d1e752b02465f5af8920bf6388b19d7ba | |
| parent | 478d685421d8cf3d2aa537e198f64266c8208dc7 (diff) | |
Add CVE-2020-116{19,20}/jackson-databind
| -rw-r--r-- | data/CVE/2020.list | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/data/CVE/2020.list b/data/CVE/2020.list index 82dc6ac3a3..eba5e928d3 100644 --- a/data/CVE/2020.list +++ b/data/CVE/2020.list @@ -31,9 +31,15 @@ CVE-2020-11622 CVE-2020-11621 RESERVED CVE-2020-11620 (FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interact ...) - TODO: check + - jackson-databind <unfixed> + NOTE: https://github.com/FasterXML/jackson-databind/issues/2682 + NOTE: Starting from 2.10 series mitigated as Safe Default Typing is enabled by default + NOTE: but still an issue when Default Typing is enabled. CVE-2020-11619 (FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interact ...) - TODO: check + - jackson-databind <unfixed> + NOTE: https://github.com/FasterXML/jackson-databind/issues/2680 + NOTE: Starting from 2.10 series mitigated as Safe Default Typing is enabled by default + NOTE: but still an issue when Default Typing is enabled. CVE-2020-11618 RESERVED CVE-2020-11617 |